Executive Summary

This vulnerability occurs during the TLS 1.3 handshake when multiple messages are sent in records that cross encryption level boundaries, such as between the Client Hello and Encrypted Extensions messages. Due to this, subsequent messages may be processed before the encryption level properly changes, potentially allowing a network-local attacker to inject messages during the handshake and cause minor information disclosure.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to minor information disclosure if a network-local attacker is able to inject messages during the TLS 1.3 handshake. This could potentially expose some sensitive handshake information to an attacker, impacting the confidentiality of the communication.

Useful 0 Not Useful 0